Warning: Permanently added '10.128.10.27' (ECDSA) to the list of known hosts.
[ 853.154840][ T3658] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 853.162740][ T3658] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 853.170113][ T3658] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 853.178268][ T3658] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 853.185861][ T3658] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 853.193232][ T3658] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 853.262898][ T3654] chnl_net:caif_netlink_parms(): no params data found
[ 853.298033][ T3654] bridge0: port 1(bridge_slave_0) entered blocking state
[ 853.306378][ T3654] bridge0: port 1(bridge_slave_0) entered disabled state
[ 853.314471][ T3654] device bridge_slave_0 entered promiscuous mode
[ 853.322951][ T3654] bridge0: port 2(bridge_slave_1) entered blocking state
[ 853.330488][ T3654] bridge0: port 2(bridge_slave_1) entered disabled state
[ 853.338205][ T3654] device bridge_slave_1 entered promiscuous mode
[ 853.355374][ T3654] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 853.365918][ T3654] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 853.385935][ T3654] team0: Port device team_slave_0 added
[ 853.392858][ T3654] team0: Port device team_slave_1 added
[ 853.407370][ T3654] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 853.414307][ T3654] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 853.440561][ T3654] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 853.452673][ T3654] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 853.459666][ T3654] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 853.485575][ T3654] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 853.509398][ T3654] device hsr_slave_0 entered promiscuous mode
[ 853.516293][ T3654] device hsr_slave_1 entered promiscuous mode
[ 853.580819][ T3654] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 853.590102][ T3654] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 853.599020][ T3654] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 853.607396][ T3654] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 853.625307][ T3654] bridge0: port 2(bridge_slave_1) entered blocking state
[ 853.632439][ T3654] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 853.640053][ T3654] bridge0: port 1(bridge_slave_0) entered blocking state
[ 853.647098][ T3654] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 853.683452][ T3654] 8021q: adding VLAN 0 to HW filter on device bond0
[ 853.694585][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 853.703617][ T3666] bridge0: port 1(bridge_slave_0) entered disabled state
[ 853.711930][ T3666] bridge0: port 2(bridge_slave_1) entered disabled state
[ 853.720043][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[ 853.732558][ T3654] 8021q: adding VLAN 0 to HW filter on device team0
[ 853.757047][ T3654] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 853.767686][ T3654] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 853.781277][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 853.790303][ T3666] bridge0: port 1(bridge_slave_0) entered blocking state
[ 853.797495][ T3666] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 853.804983][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 853.813331][ T3666] bridge0: port 2(bridge_slave_1) entered blocking state
[ 853.820819][ T3666] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 853.828949][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 853.837346][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 853.845709][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 853.854406][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 853.863097][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 853.870731][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 853.887185][ T3654] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 853.894494][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 853.902408][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 853.995565][ T3654] device veth0_vlan entered promiscuous mode
[ 854.003238][ T3671] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 854.012596][ T3671] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 854.021601][ T3671] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 854.029273][ T3671] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 854.040762][ T3654] device veth1_vlan entered promiscuous mode
[ 854.055595][ T3671] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 854.063661][ T3671] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 854.071930][ T3671] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 854.082438][ T3654] device veth0_macvtap entered promiscuous mode
[ 854.091036][ T3654] device veth1_macvtap entered promiscuous mode
[ 854.104657][ T3654] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 854.112386][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 854.121582][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 854.132889][ T3654] batman_adv: batadv0: Interface activated: batadv_slave_1
executing program
[ 854.140652][ T3666] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 854.150720][ T3654] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 854.159713][ T3654] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 854.169119][ T3654] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 854.178444][ T3654] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 854.497350][ T3671] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[ 854.888107][ T3671] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 854.899226][ T3671] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 854.909058][ T3671] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xE has an invalid bInterval 170, changing to 11
[ 854.920683][ T3671] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid maxpacket 25794, setting to 1024
[ 854.931905][ T3671] usb 1-1: New USB device found, idVendor=06f8, idProduct=a302, bcdDevice=dc.46
[ 854.941034][ T3671] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 854.953276][ T3671] usb 1-1: config 0 descriptor??
[ 854.988661][ T3679] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[ 855.229195][ T3665] Bluetooth: hci0: command 0x0409 tx timeout
executing program
[ 855.431443][ T3679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 855.440703][ T3679] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 855.469304][ T3671] iforce 1-1:0.0: usb_submit_urb failed: -71
[ 855.487746][ T3671] iforce 1-1:0.0: usb_submit_urb failed: -71
[ 855.507417][ T3671] iforce 1-1:0.0: usb_submit_urb failed: -71
[ 855.527375][ T3671] iforce 1-1:0.0: usb_submit_urb failed: -71
[ 855.533357][ T3671] input input5: Limiting number of effects to 32 (device reports 222)
[ 855.557464][ T3671] iforce 1-1:0.0: usb_submit_urb failed: -71
[ 855.577389][ T3671] iforce 1-1:0.0: usb_submit_urb failed: -71
[ 855.597351][ T3671] iforce 1-1:0.0: usb_submit_urb failed: -71
[ 855.617437][ T3671] iforce 1-1:0.0: usb_submit_urb failed: -71
[ 855.625474][ T3671] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input5
[ 855.649982][ T3671] usb 1-1: USB disconnect, device number 2
[ 856.017347][ T3671] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[ 856.417439][ T3671] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 856.428794][ T3671] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 856.438771][ T3671] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xE has an invalid bInterval 170, changing to 11
[ 856.449884][ T3671] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid maxpacket 25794, setting to 1024
[ 856.460947][ T3671] usb 1-1: New USB device found, idVendor=06f8, idProduct=a302, bcdDevice=dc.46
[ 856.469987][ T3671] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 856.484972][ T3671] usb 1-1: config 0 descriptor??
[ 856.507903][ T3681] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
executing program
[ 856.948009][ T3681] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 856.956598][ T3681] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 856.968349][ T3671] iforce 1-1:0.0: usb_submit_urb failed: -71
[ 856.987359][ T3671] iforce 1-1:0.0: usb_submit_urb failed: -71
[ 857.007347][ T3671] iforce 1-1:0.0: usb_submit_urb failed: -71
[ 857.027312][ T3671] iforce 1-1:0.0: usb_submit_urb failed: -71
[ 857.033388][ T3671] input input6: Limiting number of effects to 32 (device reports 57)
[ 857.057436][ T3671] iforce 1-1:0.0: usb_submit_urb failed: -71
[ 857.077500][ T3671] iforce 1-1:0.0: usb_submit_urb failed: -71
[ 857.097336][ T3671] iforce 1-1:0.0: usb_submit_urb failed: -71
[ 857.117352][ T3671] iforce 1-1:0.0: usb_submit_urb failed: -71
[ 857.124383][ T3671] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input6
[ 857.143938][ T3671] usb 1-1: USB disconnect, device number 3
[ 857.318242][ T3666] Bluetooth: hci0: command 0x041b tx timeout
[ 857.517292][ T3671] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[ 857.937427][ T3671] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 857.948527][ T3671] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 857.958463][ T3671] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xE has an invalid bInterval 170, changing to 11
[ 857.969538][ T3671] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid maxpacket 25794, setting to 1024
[ 857.980619][ T3671] usb 1-1: New USB device found, idVendor=06f8, idProduct=a302, bcdDevice=dc.46
[ 857.989995][ T3671] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 858.000679][ T3671] usb 1-1: config 0 descriptor??
[ 858.027736][ T3683] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
executing program
[ 858.458760][ T3683] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 858.467486][ T3683] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 858.478585][ T3671] iforce 1-1:0.0: usb_submit_urb failed: -71
[ 858.497494][ T3671] iforce 1-1:0.0: usb_submit_urb failed: -71
[ 858.517629][ T3671] iforce 1-1:0.0: usb_submit_urb failed: -71
[ 858.537433][ T3671] iforce 1-1:0.0: usb_submit_urb failed: -71
[ 858.543827][ T3671] input input7: Limiting number of effects to 32 (device reports 131)
[ 858.577521][ T3671] iforce 1-1:0.0: usb_submit_urb failed: -71
[ 858.597355][ T3671] iforce 1-1:0.0: usb_submit_urb failed: -71
[ 858.617350][ T3671] iforce 1-1:0.0: usb_submit_urb failed: -71
[ 858.637410][ T3671] iforce 1-1:0.0: usb_submit_urb failed: -71
[ 858.644533][ T3671] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input7
[ 858.662337][ T3671] usb 1-1: USB disconnect, device number 4
[ 859.388733][ T3668] Bluetooth: hci0: command 0x040f tx timeout
[ 861.468084][ T3678] Bluetooth: hci0: command 0x0419 tx timeout
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
[ 921.585006][ T2975] udevd[2975]: worker [3682] /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input7 is taking a long time
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
executing program
[ 978.917291][ T3678] Bluetooth: hci0: command 0x0406 tx timeout
executing program
executing program
executing program
executing program
[ 1002.427350][ T28] INFO: task kworker/1:3:3671 blocked for more than 143 seconds.
[ 1002.435206][ T28] Not tainted 5.19.0-rc4-syzkaller-00208-g69cb6c6556ad #0
[ 1002.442993][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1002.451763][ T28] task:kworker/1:3 state:D stack:23592 pid: 3671 ppid: 2 flags:0x00004000
[ 1002.461021][ T28] Workqueue: usb_hub_wq hub_event
[ 1002.466089][ T28] Call Trace:
[ 1002.469411][ T28]
[ 1002.472353][ T28] __schedule+0xa00/0x4b50
[ 1002.476798][ T28] ? find_held_lock+0x2d/0x110
[ 1002.481890][ T28] ? wq_worker_sleeping+0x1e5/0x250
[ 1002.487110][ T28] ? mark_held_locks+0x9f/0xe0
[ 1002.491915][ T28] ? rwlock_bug.part.0+0x90/0x90
[ 1002.496858][ T28] ? io_schedule_timeout+0x140/0x140
[ 1002.502173][ T28] ? lockdep_hardirqs_on+0x79/0x100
[ 1002.507413][ T28] schedule+0xd2/0x1f0
[ 1002.511498][ T28] schedule_preempt_disabled+0xf/0x20
[ 1002.516856][ T28] __mutex_lock+0xa70/0x1350
[ 1002.521483][ T28] ? usb_hcd_flush_endpoint+0x13e/0x410
[ 1002.527035][ T28] ? __input_unregister_device+0x24/0x470
[ 1002.533064][ T28] ? mutex_lock_io_nested+0x1190/0x1190
[ 1002.538630][ T28] ? rwlock_bug.part.0+0x90/0x90
[ 1002.543556][ T28] ? _raw_spin_unlock_irq+0x1f/0x40
[ 1002.548796][ T28] ? _raw_spin_unlock_irq+0x2a/0x40
[ 1002.553997][ T28] ? usb_hcd_flush_endpoint+0x15a/0x410
[ 1002.559567][ T28] ? mark_held_locks+0x9f/0xe0
[ 1002.564431][ T28] __input_unregister_device+0x24/0x470
[ 1002.570036][ T28] input_unregister_device+0xb4/0xf0
[ 1002.575327][ T28] iforce_usb_disconnect+0x5e/0xf0
[ 1002.580469][ T28] usb_unbind_interface+0x1d8/0x8e0
[ 1002.585688][ T28] ? usb_unbind_device+0x1a0/0x1a0
[ 1002.590896][ T28] device_remove+0x11f/0x170
[ 1002.595522][ T28] device_release_driver_internal+0x4a1/0x700
[ 1002.602198][ T28] ? put_device+0x1b/0x30
[ 1002.606574][ T28] bus_remove_device+0x2eb/0x5a0
[ 1002.611704][ T28] device_del+0x4f3/0xc80
[ 1002.616046][ T28] ? __device_link_del+0x380/0x380
[ 1002.621420][ T28] ? kobject_put+0x1f3/0x540
[ 1002.626024][ T28] usb_disable_device+0x35b/0x7b0
[ 1002.632038][ T28] usb_disconnect.cold+0x278/0x6ec
[ 1002.637219][ T28] hub_event+0x1e83/0x4690
[ 1002.641747][ T28] ? hub_port_debounce+0x3c0/0x3c0
[ 1002.647105][ T28] ? lock_release+0x780/0x780
[ 1002.651868][ T28] ? lock_downgrade+0x6e0/0x6e0
[ 1002.656728][ T28] ? do_raw_spin_lock+0x120/0x2a0
[ 1002.662166][ T28] process_one_work+0x996/0x1610
[ 1002.667143][ T28] ? pwq_dec_nr_in_flight+0x2a0/0x2a0
[ 1002.672617][ T28] ? rwlock_bug.part.0+0x90/0x90
[ 1002.677735][ T28] ? _raw_spin_lock_irq+0x41/0x50
[ 1002.682931][ T28] worker_thread+0x854/0x1080
[ 1002.687926][ T28] ? __kthread_parkme+0x15f/0x220
[ 1002.692996][ T28] ? process_one_work+0x1610/0x1610
[ 1002.698250][ T28] kthread+0x2e9/0x3a0
[ 1002.702321][ T28] ? kthread_complete_and_exit+0x40/0x40
[ 1002.708136][ T28] ret_from_fork+0x1f/0x30
[ 1002.712590][ T28]
[ 1002.715659][ T28]
[ 1002.715659][ T28] Showing all locks held in the system:
[ 1002.723612][ T28] 2 locks held by kworker/u4:1/11:
[ 1002.729033][ T28] 1 lock held by khungtaskd/28:
[ 1002.733885][ T28] #0: ffffffff8bd86660 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x260
[ 1002.743845][ T28] 2 locks held by acpid/2960:
[ 1002.748638][ T28] #0: ffff888025a28158 (&joydev->mutex){+.+.}-{3:3}, at: joydev_release+0x187/0x290
[ 1002.758170][ T28] #1: ffff8880171142c0 (&dev->mutex#2){+.+.}-{3:3}, at: input_close_device+0x42/0x1f0
[ 1002.767892][ T28] 2 locks held by getty/3290:
[ 1002.772548][ T28] #0: ffff88814ae2b098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x22/0x80
[ 1002.782355][ T28] #1: ffffc90002d162e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0xe50/0x13c0
[ 1002.792710][ T28] 6 locks held by kworker/1:3/3671:
[ 1002.798303][ T28] #0: ffff888016ca6938 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x87a/0x1610
[ 1002.809162][ T28] #1: ffffc900036efda8 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x8ae/0x1610
[ 1002.820432][ T28] #2: ffff888147a0c190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1c1/0x4690
[ 1002.829532][ T28] #3: ffff888017116190 (&dev->mutex){....}-{3:3}, at: usb_disconnect.cold+0x43/0x6ec
[ 1002.839169][ T28] #4: ffff888017113118 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xa0/0x700
[ 1002.849758][ T28] #5: ffff8880171142c0 (&dev->mutex#2){+.+.}-{3:3}, at: __input_unregister_device+0x24/0x470
[ 1002.860177][ T28] 3 locks held by udevd/3682:
[ 1002.864854][ T28] #0: ffff888146cb0c88 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_read_iter+0x189/0x6e0
[ 1002.874624][ T28] #1: ffff88802671ae88 (kn->active#86){++++}-{0:0}, at: kernfs_fop_read_iter+0x1ac/0x6e0
[ 1002.885125][ T28] #2: ffff888017116190 (&dev->mutex){....}-{3:3}, at: read_descriptors+0x3c/0x2c0
[ 1002.894577][ T28]
[ 1002.896898][ T28] =============================================
[ 1002.896898][ T28]
[ 1002.905573][ T28] NMI backtrace for cpu 1
[ 1002.909913][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted 5.19.0-rc4-syzkaller-00208-g69cb6c6556ad #0
[ 1002.919870][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022
[ 1002.930080][ T28] Call Trace:
[ 1002.933346][ T28]
[ 1002.936259][ T28] dump_stack_lvl+0xcd/0x134
[ 1002.941104][ T28] nmi_cpu_backtrace.cold+0x47/0x144
[ 1002.946640][ T28] ? lapic_can_unplug_cpu+0x80/0x80
[ 1002.951825][ T28] nmi_trigger_cpumask_backtrace+0x1e6/0x230
[ 1002.957794][ T28] watchdog+0xc1d/0xf50
[ 1002.961935][ T28] ? proc_dohung_task_timeout_secs+0x80/0x80
[ 1002.967987][ T28] kthread+0x2e9/0x3a0
[ 1002.972120][ T28] ? kthread_complete_and_exit+0x40/0x40
[ 1002.977736][ T28] ret_from_fork+0x1f/0x30
[ 1002.982145][ T28]
[ 1002.985544][ T28] Sending NMI from CPU 1 to CPUs 0:
[ 1002.990804][ C0] NMI backtrace for cpu 0
[ 1002.990813][ C0] CPU: 0 PID: 3667 Comm: kworker/u4:2 Not tainted 5.19.0-rc4-syzkaller-00208-g69cb6c6556ad #0
[ 1002.990830][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022
[ 1002.990840][ C0] Workqueue: events_unbound toggle_allocation_gate
[ 1002.990860][ C0] RIP: 0010:__lock_acquire+0x55/0x5660
[ 1002.990880][ C0] Code: 84 24 40 01 00 00 48 c7 84 24 88 00 00 00 b3 8a b5 41 48 c7 84 24 90 00 00 00 88 2d 60 8b 48 c7 84 24 98 00 00 00 50 ef 5d 81 <44> 89 44 24 08 48 89 44 24 20 48 8d 84 24 88 00 00 00 48 c1 e8 03
[ 1002.990893][ C0] RSP: 0018:ffffc900036af740 EFLAGS: 00000082
[ 1002.990908][ C0] RAX: 0000000000000000 RBX: ffff8880119c1138 RCX: 0000000000000000
[ 1002.990917][ C0] RDX: dffffc0000000000 RSI: 0000000000000000 RDI: ffff8880119c1138
[ 1002.990927][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000
[ 1002.990934][ C0] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000000
[ 1002.990942][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1002.990953][ C0] FS: 0000000000000000(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000
[ 1002.990965][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1002.990975][ C0] CR2: 00007fd666592d30 CR3: 000000000ba8e000 CR4: 0000000000350ef0
[ 1002.990984][ C0] Call Trace:
[ 1002.990987][ C0]
[ 1002.990995][ C0] ? lock_chain_count+0x20/0x20
[ 1002.991012][ C0] ? lockdep_hardirqs_on_prepare+0x400/0x400
[ 1002.991029][ C0] ? mark_lock.part.0+0xee/0x1910
[ 1002.991049][ C0] lock_acquire+0x1ab/0x570
[ 1002.991064][ C0] ? __get_locked_pte+0x154/0x270
[ 1002.991081][ C0] ? lock_release+0x780/0x780
[ 1002.991098][ C0] ? __text_poke+0x5d2/0x8e0
[ 1002.991114][ C0] ? lock_downgrade+0x6e0/0x6e0
[ 1002.991132][ C0] _raw_spin_lock+0x2a/0x40
[ 1002.991147][ C0] ? __get_locked_pte+0x154/0x270
[ 1002.991162][ C0] __get_locked_pte+0x154/0x270
[ 1002.991177][ C0] ? __kmalloc+0xce/0x350
[ 1002.991192][ C0] __text_poke+0x1b3/0x8e0
[ 1002.991208][ C0] ? cpumask_weight+0x40/0x40
[ 1002.991226][ C0] ? text_poke_memset+0x60/0x60
[ 1002.991244][ C0] text_poke_bp_batch+0x44a/0x6c0
[ 1002.991260][ C0] ? __kmalloc+0xce/0x350
[ 1002.991276][ C0] ? do_sync_core+0x20/0x20
[ 1002.991294][ C0] ? __jump_label_update+0x351/0x400
[ 1002.991309][ C0] text_poke_finish+0x16/0x30
[ 1002.991321][ C0] arch_jump_label_transform_apply+0x13/0x20
[ 1002.991337][ C0] jump_label_update+0x32f/0x410
[ 1002.991351][ C0] static_key_enable_cpuslocked+0x1b1/0x260
[ 1002.991365][ C0] static_key_enable+0x16/0x20
[ 1002.991377][ C0] toggle_allocation_gate+0x100/0x390
[ 1002.991391][ C0] ? lock_release+0x780/0x780
[ 1002.991407][ C0] ? wake_up_kfence_timer+0x20/0x20
[ 1002.991421][ C0] ? do_raw_spin_lock+0x120/0x2a0
[ 1002.991437][ C0] process_one_work+0x996/0x1610
[ 1002.991455][ C0] ? pwq_dec_nr_in_flight+0x2a0/0x2a0
[ 1002.991470][ C0] ? rwlock_bug.part.0+0x90/0x90
[ 1002.991483][ C0] ? _raw_spin_lock_irq+0x41/0x50
[ 1002.991499][ C0] worker_thread+0x665/0x1080
[ 1002.991515][ C0] ? __kthread_parkme+0x15f/0x220
[ 1002.991527][ C0] ? process_one_work+0x1610/0x1610
[ 1002.991542][ C0] kthread+0x2e9/0x3a0
[ 1002.991553][ C0] ? kthread_complete_and_exit+0x40/0x40
[ 1002.991567][ C0] ret_from_fork+0x1f/0x30
[ 1002.991586][ C0]
[ 1002.992050][ T28] Kernel panic - not syncing: hung_task: blocked tasks
[ 1002.992060][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted 5.19.0-rc4-syzkaller-00208-g69cb6c6556ad #0
[ 1002.992077][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022
[ 1002.992089][ T28] Call Trace:
[ 1002.992093][ T28]
[ 1002.992099][ T28] dump_stack_lvl+0xcd/0x134
[ 1002.992119][ T28] panic+0x2d7/0x636
[ 1002.992135][ T28] ? panic_print_sys_info.part.0+0x10b/0x10b
[ 1002.992155][ T28] ? lapic_can_unplug_cpu+0x80/0x80
[ 1002.992172][ T28] ? preempt_schedule_thunk+0x16/0x18
[ 1002.992192][ T28] ? watchdog.cold+0x130/0x158
[ 1002.992215][ T28] watchdog.cold+0x141/0x158
[ 1002.992236][ T28] ? proc_dohung_task_timeout_secs+0x80/0x80
[ 1002.992256][ T28] kthread+0x2e9/0x3a0
[ 1002.992269][ T28] ? kthread_complete_and_exit+0x40/0x40
[ 1002.992287][ T28] ret_from_fork+0x1f/0x30
[ 1002.992313][ T28]
[ 1002.996766][ T28] Kernel Offset: disabled
[ 1003.409536][ T28] Rebooting in 86400 seconds..